Dominik, From poking around on the Wazuh site, it looks like the ruleset is in github (https://github.com/wazuh/wazuh-ruleset). You may just be able to clone that use the rules there (which were updated 2 hours ago when I just checked).
--Maarten On Tuesday, March 20, 2018 at 12:05:39 PM UTC-4, Dominik wrote: > > In a previous post, I was pointed at the Wazuh ruleset: > > https://groups.google.com/d/topic/ossec-list/VAevLyoDYTs/discussion > > However, this ruleset is no longer maintained for ossec. Now I see two > options: > > 1) move from ossec to wazuh to be able to use the lastest version of this > ruleset > > 2) remove the wazuh ruleset and work with ossec again. > > Does anyone know about a third option? > > > > Greetings > Dominik > > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
